CVE-2026-45191 is a vulnerability in Net::CIDR::Lite versions before 0.24 for Perl. The issue arises from the library's failure to properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. For instance, mask forms like '/00' and '/01' pass validation and parse to the same prefix as their unpadded value. This vulnerability has a CVSS score of 6.5 and a severity of MED [truncated]
CVE-2026-45190 is a vulnerability in Net::CIDR::Lite versions before 0.24 for Perl. The vulnerability may allow IP ACL bypass due to improper validation of IP address and CIDR mask inputs. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. This can cause find() and bin_find() to [truncated]
